PT-2021-3686

CVE-2021-36397

·

Published

2021-07-13

·

Updated

2025-03-07

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)
Description The issue is related to insufficient capability checks in Moodle, which can allow a remote attacker to bypass security features. Specifically, the problem lies in the fact that message deletions were not limited to the current user, potentially allowing unauthorized access to sensitive information.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-2WMJ-8MQG-R9Q8
ALT-PU-2021-2215
ALT-PU-2022-1641
BIT-MOODLE-2021-36397
Found an issue in the description? Have something to add? Feel free to write us 👾